隐私政策
最后更新：2026年9月3日 版本 2.0 — 适用于 iAgent Plus 网站、移动应用及所有平台
本隐私政策说明智云（莆田）科技有限公司（地址：中国福建省莆田市涵江区江口镇荔涵东大道9980号301室，下称"我们"、"公司"）在您使用 iAgent Plus 平台（下称"本服务"，包括我们的网站、移动应用及相关服务）时，如何收集、使用、披露和保护个人信息。
我们致力于保护您的隐私，并依据适用法律处理个人信息，包括欧盟《通用数据保护条例》（GDPR）、英国 GDPR、《加州消费者隐私法》（CCPA/CPRA）以及其他适用的数据保护法律。
1. 我们收集的信息
1.1 您直接提供的信息
- 账户信息：注册或登录时的姓名、电子邮箱地址及密码或其他身份验证凭据。
- 资料信息：偏好设置、配置项，以及您自愿添加到个人资料中的其他信息。
- 用户内容：您为与智能体交互而提交的消息、提示词、文件、文档、图片及其他内容。
- 账单信息：购买订阅时，付款详情（如银行卡信息）由我们的支付服务商 Paddle 收集和处理。我们的服务器不存储完整的银行卡号。
- 通讯信息：您联系客服或参与调查时提供的信息。
1.2 自动收集的信息
- 使用数据：使用的页面与功能、交互行为、会话时长及功能使用情况。
- 设备与日志数据：IP 地址、浏览器类型与版本、操作系统、设备标识符及设备类型。
- 位置数据：由 IP 地址推算的大致位置（国家/地区级别）。
- Cookie 及类似技术：用于保持登录状态、记住偏好和统计使用情况的令牌与标识符（见第8条）。
2. 我们如何使用信息
我们将个人信息用于以下目的：
- (a) 提供本服务：创建和管理账户、处理提示词并交付 AI 输出，以及提供您请求的功能。
- (b) 计费与支付：通过支付服务商处理订阅、开票及付款相关通讯。
- (c) 支持与沟通：回复咨询、提供客户支持，并发送服务相关通知（账单、安全、维护）。
- (d) 改进本服务：分析使用情况、调试及开发新功能。
- (e) 安全与反欺诈：检测、调查和防范欺诈性、滥用性或违法活动。
- (f) 法律合规：遵守法律义务、解决争议并执行我们的协议。
- (g) 营销（仅限经同意）：在您选择加入的情况下，向您发送产品更新与优惠信息。您可随时选择退出。
3. 处理的法律依据（GDPR / 英国 GDPR）
若您位于欧洲经济区或英国，我们基于以下法律依据处理个人信息：
- 履行合同（第6(1)(b)条）：提供您请求的服务并处理付款。
- 合法利益（第6(1)(f)条）：运营和保护本服务、防范欺诈及改进产品。我们将该等利益与您的权利和自由进行权衡。
- 同意（第6(1)(a)条）：用于营销通讯、非必要 Cookie 等可选活动。您可随时撤回同意。
- 法律义务（第6(1)(c)条）：法律要求进行处理时。
4. 我们如何共享信息
我们不会出售您的个人信息。仅在以下情形下共享信息：
- 服务提供商与供应商：协助我们运营本服务的公司，如云托管、数据分析、邮件发送和客服工具，其受保密与数据保护合同义务的约束。
- 支付处理：Paddle（我们的登记商户及支付服务商）处理付款及相关数据。Paddle 依据其自身隐私政策作为支付数据的控制者/处理者。
- AI 模型服务商：您提交的内容可能被传输至第三方 AI 模型服务商（如大语言模型与图像生成服务）以生成回复。在需要时，我们依赖适当的保障措施，并将该等处理限制在提供服务所必需的范围内。
- 专业顾问与主管机关：在法律、法规、司法程序或政府要求时。
- 商业交易：在合并、收购、重组或资产出售中，您的信息可能作为交易的一部分被转让，但仍受本隐私政策约束。
- 经您同意：在您给予明确同意的情况下，为其他目的共享信息。
我们不会为第三方的直接营销目的向其披露个人信息。
5. 国际数据传输
本服务在全球范围运营。您的个人信息可能在您居住国以外的国家/地区被处理，包括中国以及我们或我们的服务提供商运营所在的其他司法辖区。
在适用法律（如 GDPR/英国 GDPR）要求时，我们通过适当的保障措施确保国际传输受到保护，例如：
- 欧盟委员会或英国信息专员办公室采用的标准合同条款（SCCs）；
- 适用法律认可的其他有效传输机制。
您可通过 support@iagent.plus 联系我们，索取相关保障措施的副本。
6. 数据保留
我们仅在实现以下目的所必需的期限内保留个人信息：
- 提供本服务并实现本政策所述目的；
- 遵守法律、税务及会计义务；
- 解决争议并执行协议。
具体而言：
- 账户数据在您的账户存续期间保留；账户删除后，如有需要（如法律或审计目的），将在合理期限内继续保留。
- 用户内容在账户删除后的合理期限内（通常为30–90天）删除或匿名化，但须遵守法定保存要求。
- 备份数据为灾难恢复目的在有限期限内保留。
7. 您的权利与选择
7.1 GDPR / 英国 GDPR 项下的权利
若您位于欧洲经济区或英国，您有权：
- 访问：获取您的个人信息副本；
- 更正：更正不准确或不完整的信息；
- 删除（"被遗忘权"）：请求删除您的个人信息；
- 限制：在特定情形下限制处理；
- 可携带：以结构化、机器可读的格式接收您的信息；
- 反对：对基于合法利益或直接营销的处理提出反对；
- 撤回同意：在处理基于同意的情况下，可随时撤回；
- 投诉：向当地监管机构投诉。
7.2 CCPA/CPRA 项下的权利（加州居民）
若您是加州居民，您有权：
- 知情：请求披露我们收集、使用和共享的个人信息的类别及具体内容；
- 删除：请求删除我们收集的个人信息，但法定例外情形除外；
- 更正：请求更正不准确的个人信息；
- 选择退出出售/共享：我们不出售个人信息，也不为跨情境行为广告共享个人信息；
- 不受歧视：您行使隐私权利不会受到歧视对待。
7.3 如何行使您的权利
如需行使上述任何权利，请联系 support@iagent.plus。我们将核实您的身份，并在法律要求的期限内回复（通常为30天内，允许时可延长）。我们可能需要请求补充信息以核实您的身份。
您也可以授权代理人代表您提出请求。
8. Cookie 及类似技术
我们使用 Cookie 及类似技术以：
- 必要 Cookie：保持登录状态、维护会话安全并实现核心功能；
- 功能 Cookie：记住您的偏好设置；
- 分析 Cookie：了解本服务的使用情况（如匿名使用统计）。
在法律要求的地区（如欧洲经济区/英国），我们会展示 Cookie 同意横幅，并在设置非必要 Cookie 前尊重您的选择。您可通过浏览器设置管理或删除 Cookie；但禁用必要 Cookie 可能影响本服务的功能。
9. 安全
我们采取适当的技术和组织措施保护个人信息，包括传输加密（TLS）、访问控制和安全存储。但任何传输或存储方式都无法保证100%安全，我们无法保证绝对安全。若发生影响您个人信息的数据泄露事件，我们将按适用法律的要求通知您及相关监管机构。
10. 儿童隐私
本服务不面向未满18周岁（或未达您所在司法辖区数字同意年龄）的儿童。我们不会明知而收集儿童的个人信息。若您认为某儿童向我们提供了个人信息，请联系 support@iagent.plus，我们将及时删除。
11. 自动化决策与 AI
我们使用 AI 模型为您的提示词生成回复。这是本服务核心功能的一部分，除您请求的内容外，不会对您产生法律或类似重大影响。我们不会将 AI 用于对您作出具有法律或类似重大影响的自动化决策（如信贷决策）。
12. 本隐私政策的变更
我们可能不定期更新本隐私政策。在法律要求时，重大变更将至少提前30天通过在本页面发布更新后的政策、发送电子邮件或通过本服务通知等方式公布。顶部的"最后更新"日期标明政策的最近修订时间。变更生效后您继续使用本服务，即表示接受变更。
13. 联系我们与数据保护咨询
如对本隐私政策或您的个人数据有任何疑问、关切或请求，请联系我们：
邮箱： support@iagent.plus
若您位于欧洲经济区或英国，在我们回复后您仍不满意，也可联系当地监管机构（如您居住国的数据保护机构）。
Privacy Policy
Last updated: September 3, 2026 Version 2.0 — Applies to website, mobile applications, and all platforms of iAgent Plus
This Privacy Policy explains how Zhiyun (Putian) Technology Co., Ltd., Room 301, No. 9980 Lihan East Avenue, Jiangkou Town, Hanjiang District, Putian City, Fujian Province, China ("we", "us", "our", "Company") collects, uses, discloses, and protects personal information when you use the iAgent Plus platform ("Service"), including our website, mobile application, and related services.
We are committed to protecting your privacy and processing personal information in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws.
1. Information We Collect
1.1 Information you provide directly
- Account information: name, email address, and password or authentication credentials when you register or log in.
- Profile information: preferences, settings, and any details you voluntarily add to your profile.
- User content: messages, prompts, files, documents, images, and other content you submit to interact with Agents.
- Billing information: when you purchase a subscription, payment details (e.g., card data) are collected and processed by our payment provider, Paddle. We do not store full payment card numbers on our servers.
- Communications: information you provide when contacting support or participating in surveys.
1.2 Information collected automatically
- Usage data: pages and features used, interactions, session duration, and feature engagement.
- Device and log data: IP address, browser type and version, operating system, device identifiers, and device type.
- Location data: approximate location derived from IP address (country/region level).
- Cookies and similar technologies: tokens and identifiers used to keep you signed in, remember preferences, and measure usage (see Section 8).
2. How We Use Information
We use personal information for the following purposes:
- (a) Provide the Service: create and manage accounts, process prompts and deliver AI output, and provide features you request.
- (b) Billing and payments: process subscriptions, invoicing, and payment-related communications through our Payment Provider.
- (c) Support and communication: respond to inquiries, provide customer support, and send service-related notices (billing, security, maintenance).
- (d) Improve the Service: analyze usage, debug, and develop new features.
- (e) Security and fraud prevention: detect, investigate, and prevent fraudulent, abusive, or unlawful activity.
- (f) Legal compliance: comply with legal obligations, resolve disputes, and enforce our agreements.
- (g) Marketing (only with consent): where you have opted in, send product updates and offers. You may opt out at any time.
3. Legal Bases for Processing (GDPR / UK GDPR)
If you are located in the EEA or the UK, we process personal information on the following legal bases:
- Performance of a contract (Art. 6(1)(b)): to provide the Service you requested and process payments.
- Legitimate interests (Art. 6(1)(f)): to operate and secure the Service, prevent fraud, and improve our products. We balance these interests against your rights and freedoms.
- Consent (Art. 6(1)(a)): for optional activities such as marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): where processing is required by law.
4. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
- Service providers and vendors: companies that help us operate the Service, such as cloud hosting, analytics, email delivery, and support tools, under contractual obligations of confidentiality and data protection.
- Payment processing: Paddle (our merchant-of-record and payment provider) processes payments and related data. Paddle acts as a data controller/processor for payment data in accordance with its own privacy policy.
- AI model providers: content you submit may be transmitted to third-party AI model providers (e.g., large language model and image generation services) to generate responses. Where required, we rely on appropriate safeguards and limit such processing to what is necessary to deliver the Service.
- Professional advisers and authorities: where required by law, regulation, legal process, or governmental request.
- Business transactions: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction, subject to this Privacy Policy.
- With your consent: we may share information for other purposes where you have given specific consent.
We do not disclose personal information to third parties for their own direct marketing purposes.
5. International Data Transfers
The Service is operated globally. Your personal information may be processed in countries outside your country of residence, including in China and other jurisdictions where we or our service providers operate.
Where required by applicable law (e.g., GDPR/UK GDPR), we ensure that international transfers are protected by appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) adopted by the European Commission or the UK Information Commissioner;
- other valid transfer mechanisms recognized under applicable law.
You may request a copy of the relevant safeguards by contacting us at support@iagent.plus.
6. Data Retention
We retain personal information only for as long as necessary to:
- provide the Service and fulfill the purposes described in this Policy;
- comply with legal, tax, and accounting obligations;
- resolve disputes and enforce agreements.
Specifically:
- Account data is retained while your account is active and for a reasonable period after deletion where required (e.g., for legal or audit purposes).
- User content is deleted or anonymized within a reasonable period after account deletion (typically 30–90 days), subject to legal retention requirements.
- Backup copies are retained for limited periods for disaster recovery.
7. Your Rights and Choices
7.1 Rights under GDPR / UK GDPR
If you are in the EEA or the UK, you have the right to:
- Access: obtain a copy of your personal information;
- Rectification: correct inaccurate or incomplete information;
- Erasure ("right to be forgotten"): request deletion of your personal information;
- Restriction: restrict processing in certain circumstances;
- Portability: receive your information in a structured, machine-readable format;
- Object: object to processing based on legitimate interests or for direct marketing;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with your local supervisory authority.
7.2 Rights under CCPA/CPRA (California residents)
If you are a California resident, you have the right to:
- Know: request disclosure of the categories and specific pieces of personal information we collect, use, and share;
- Delete: request deletion of personal information we have collected, subject to legal exceptions;
- Correct: request correction of inaccurate personal information;
- Opt out of sale/sharing: we do not sell personal information and do not share it for cross-context behavioral advertising;
- Non-discrimination: we will not discriminate against you for exercising your privacy rights.
7.3 How to exercise your rights
To exercise any of these rights, contact us at support@iagent.plus. We will verify your identity and respond within the timeframe required by law (typically within 30 days, extendable where permitted). We may need to request additional information to verify your identity.
You may also authorize an agent to make a request on your behalf.
8. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Essential: keep you signed in, maintain session security, and enable core functionality;
- Functional: remember preferences;
- Analytics: understand how the Service is used (e.g., anonymized usage statistics).
Where required by law (e.g., in the EEA/UK), we present a cookie consent banner and honor your choices before setting non-essential cookies. You can manage or delete cookies through your browser settings; however, disabling essential cookies may affect the functionality of the Service.
9. Security
We implement appropriate technical and organizational measures to protect personal information, including encryption in transit (TLS), access controls, and secure storage. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.
10. Children's Privacy
The Service is not directed to children under the age of 18 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@iagent.plus and we will delete it promptly.
11. Automated Decision-Making and AI
We use AI models to generate responses to your prompts. This is part of the core functionality of the Service and does not produce legal or similarly significant effects on you outside of the content you request. We do not use AI for automated decision-making with legal or similarly significant effects (such as credit decisions) about you.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be announced by posting the updated policy on this page, by email, or through the Service at least 30 days before they take effect where required by law. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance.
13. Contact Us and Data Protection Queries
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: support@iagent.plus
For users in the EEA or the UK, you may also contact your local supervisory authority (e.g., the data protection authority in your country of residence) if you are not satisfied with our response.